Hi Victor,
I would try to use the iptables logs to see whether you accidently
filter
some traffic and tcpdump to see whether something goes out and what
comes
in.
Forwarding is not necessary for the VServers as they run in the same
kernel.
What does a ping output?
Baltasar
On 27.03.2008, at 11:02, Víctor Román Archidona wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi again,
>
> I made a typo when I wrote the previous email. The correct
> <path/to/vserver>interfaces/1/ip is:
> ~ /etc/vservers/private/interfaces/1/ip > 172.16.1.10
>
> Thanks for all in advance.
>
> Víctor Román Archidona escribió:
> | Hi,
> |
> | I'm using several VPS on the same machine with multiple public IP
> | addresses. Both host and VPS machines has network conectivity and
> reachs
> | the public Internet via eth0, which has all the public IPs.
> |
> | Now I'm building "private" VPS on 172.16.1.0/24 network segment.
> If I
> | give 172.16.1.1 to HOST and 172.16.1.10 to a private VPS, they
> both can
> | see each other.
> |
> | The problem comes when I try to reach the public internet from the
> | private VPS on the private subnet. I also enabled forwarding and
> | postrouting on the host:
> |
> | echo 1 > /proc/sys/net/ipv4/ip_forward
> | iptables -t nat -A POSTROUTING -s 172.16.1.0/24 ! -d
> 172.16.1.0/24 -j
> | SNAT --to A.B.C.D
> |
> | (being A.B.C.D the public IP address).
> |
> | The VPS has the following interfaces configuration:
> | ~ /etc/vservers/private/interfaces/0/dev > lo
> | ~ /etc/vservers/private/interfaces/0/prefix > 8
> | ~ /etc/vservers/private/interfaces/0/ip > 127.0.0.1
> |
> | ~ /etc/vservers/private/interfaces/1/dev > eth0
> | ~ /etc/vservers/private/interfaces/1/prefix > 24
> | ~ /etc/vservers/private/interfaces/1/ip > 171.16.1.10
> |
> | Can anyone help me or give some hint about why I cannot reach the
> public
> | Internet?
> |
> | Regards,
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkfrcJsACgkQQ/ddYKMfqaDunACffW0qBsFxy2HaT9CEV4ii5+OO
> f94An1icQ0MSNWxY/zhUJTJGWKx9z400
> =N4TR
> -----END PGP SIGNATURE-----
>
((( Baltasar Cevc
) World wide web:
# http://www.openairkino.net/ (a project for the local youth;
German only)
# http://technik.juz-kirchheim.de/ (programming and admin projects)
# http://baltasar.cevc-topp.de/ (private homepage)
) Phone:
+49 178 691 22 33
)